A Method of Generating Dynamic Password Using Static Password as Source

Abstract

The invention discloses a method for generating a dynamic password using a static password as a source, comprising: S1 server storing static passwords and index codes; S2 server randomly generating intermediate passwords each time receiving a password input request from a user terminal The mapping relationship set, the index code is used to specify one of the intermediate password mapping relationship sets as the intermediate password used for the current password input, and then generate a dynamic password through the dynamic password mapping relationship between the intermediate password and the input keyboard; S3 server side Display the intermediate password mapping relationship set on the user interface to prompt the user to use the index code to find the intermediate password, and then use the dynamic password mapping relationship between the intermediate password and the input keyboard to obtain the dynamic password; The dynamic password is sent to the server, and the server verifies whether the dynamic password input by the user is consistent with the dynamic password obtained in step S2. The invention can improve the protection of the static password.

Description

technical field [0001] The invention relates to a dynamic password method, in particular to a method for generating a dynamic password from a static password. Background technique [0002] At present, the password input method in many fields such as finance and the Internet still uses static password as the main identity verification method, and static password input is used as identity verification alone, which has the following defects: [0003] 1. Easy to be stolen: Since the input of the static password is directly typed by the user on the keyboard by pressing the corresponding number or letter, the third person can obtain the password only by recording or watching the input process of the password, and the password can be obtained by viewing it once. It is possible to steal all the information of the password, therefore, the static password is easy to be stolen by others all at once. [0004] 2. Easier to be deciphered: Even if you can only observe the process of enter...

AI Technical Summary

Problems solved by technology

[0003] 1. Easy to be stolen: Since the input of the static password is directly typed by the user on the keyboard by pressing the corresponding number or letter, the third person can obtain the password only by recording or watching the input process of the password, and the password can be obtained by viewing it once. It is possible to steal all the information of the password, therefore, the static password is easy to be stolen by others at once

[0008] First, the dynamic verification code requires additional equipment to receive or generate it, and there is a risk that the dynamic verification code will be intercepted or the special algorithm for generating the dynamic verification code will be cracked;

[0009] Second, the user's static password is separate from the existing dynamic password and needs to be entered into the client together with the dynamic verification code, which cannot achieve the purpose of protecting the user's original static password from being peeped by others. To add a layer of protection for identity verification, the risk of static passwords being stolen has not been reduced

Images